Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
File: CyR-czkeydaipG8ssLAvyZQojxM.mft (raw, json)
Hash identifier: pE1ykTD7qczxo9sW56d3Sq3Bz9Pi7Eg+jR9CpiHzMkU=
Subject key identifier: 10:70:42:A9:FA:DD:2D:BF:B2:45:38:C0:20:0B:AE:DF:0E:30:E8:55
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019F91DA8C463E46A8500234C700833E0DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
Manifest number: 0E7B
Signing time: Fri 24 Jul 2026 02:00:46 +0000
Manifest this update: Fri 24 Jul 2026 02:00:46 +0000
Manifest next update: Sat 25 Jul 2026 02:00:46 +0000
Files and hashes: 1: 3QU72n6t3MWYqTRmtQPsgUZpVD4.roa (hash: SI2+K6a2Rt0xu9fvCiRz8l4pzkh4ttyf9ACSs48nZZ8=)
2: C7upr3OThd3tXxD0Jp3efP87jfI.roa (hash: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=)
3: CyR-czkeydaipG8ssLAvyZQojxM.crl (hash: fxDt+OfdHYkhUmiO+1g60vYcCBYtXC7/r07+nwzX2AE=)
4: DRiTAPDF2xW4Cnr5WD7jOyCgpVU.roa (hash: 85mXUp42nU1HdKjC1kde1s7WFJRgutSos2YP8UM06Vw=)
5: PPSBbdrAtgcgXON-ZEnuVTdydek.roa (hash: 26qcz9smP5qtjov7YMsO3/ZgGWIDpKGNOgayn6qmDak=)
6: WueW6I82GEBJmTpOwdN6my0iBVY.roa (hash: MkREwPkdmJOow1TbkT+eAldjPSpx7GvsHIK7qit+dc8=)
7: j5b05RZ-Pc84VbhjXWfOQdXvstg.roa (hash: fBPy1BOnpgVVJsYa962/feL6Jx4Rr6v5dNxNajdLYgw=)
8: wdvXFPkvt-d9b0S5-H5QvNZuELY.roa (hash: pOQkB8CIcydxsKoAZ+FXu6v1HpR5Zz+Qp6TW+J9alA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:8c:46:3e:46:a8:50:02:34:c7:00:83:3e:0d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 24 02:00:46 2026 GMT
Not After : Jul 25 02:00:46 2026 GMT
Subject: CN=107042a9fadd2dbfb24538c0200baedf0e30e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:04:29:c8:53:3c:07:aa:83:d3:c3:4b:77:
6c:6a:fd:73:8d:31:c5:15:f9:57:0b:11:d6:c8:fd:
69:75:b9:6b:b0:ec:fa:08:e0:98:87:0d:ca:52:71:
9c:0c:37:35:56:fe:77:53:34:80:0f:8c:4a:c7:0e:
a5:02:26:d9:88:87:fe:23:b2:17:75:59:86:0a:90:
00:fa:57:45:76:9e:66:06:3b:65:c1:21:2f:ab:dc:
38:75:48:5f:6f:2a:ff:4e:b1:43:48:b6:13:2d:fc:
c4:1c:49:88:cf:1d:a2:ff:38:38:3f:b1:01:32:42:
2f:a2:3b:54:40:d1:94:4f:92:4e:e4:ee:f5:93:a2:
7c:46:f9:98:a6:14:4d:3a:05:d6:0e:47:6a:b5:ff:
22:43:c5:ca:33:36:83:c4:ae:92:df:8f:4c:45:a9:
a9:7f:d5:ef:21:2b:f2:9a:cf:de:d3:3c:cc:76:11:
c3:6c:41:1f:d0:65:bd:b3:a1:3d:c8:0a:c3:c1:93:
88:5d:a4:30:a9:41:e3:52:fe:c3:7e:61:2b:00:10:
36:b1:9c:b9:78:12:86:e6:8a:48:73:82:46:12:eb:
84:d3:95:11:86:3a:ba:4f:55:95:4f:3a:cd:96:83:
9a:2d:83:55:95:1c:fa:52:42:6d:25:9d:b8:68:01:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:70:42:A9:FA:DD:2D:BF:B2:45:38:C0:20:0B:AE:DF:0E:30:E8:55
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2f:62:3e:78:d0:4d:f0:fd:74:1c:81:4f:27:b2:0d:0a:25:
0e:c0:da:d8:ae:9f:7b:cf:8b:9c:ec:bd:aa:a4:b2:7f:57:21:
64:02:db:fc:8f:73:d8:8a:c0:97:c3:77:a9:15:3f:df:15:fe:
5b:d4:07:74:05:ab:28:86:45:8c:8d:48:0f:60:f4:ac:59:41:
5b:b2:c9:a1:0b:05:6a:7f:b8:a5:44:89:a6:d7:17:c3:b8:24:
cb:80:eb:b8:af:24:e0:b7:1d:a5:d0:a5:84:59:21:40:ba:18:
c5:84:5a:95:58:96:69:c0:f1:b7:5d:11:03:c4:d0:aa:e4:9f:
b8:53:d1:8c:41:be:35:02:8b:b4:d1:e7:0b:bf:ee:c6:ed:c8:
27:29:92:fe:71:f5:05:08:ba:25:22:90:66:a8:2f:aa:74:62:
eb:b7:89:9a:36:76:ac:5f:f6:1e:63:dd:d8:0f:78:c1:47:34:
00:34:4b:8f:6b:8d:ad:9d:45:4f:d5:04:95:57:4f:5a:9a:4b:
25:74:00:46:2d:23:c1:bc:dd:f9:a5:3f:d3:cc:95:c3:dd:ef:
c3:b2:64:b5:c2:62:31:e6:f8:96:1e:52:b3:29:31:e6:de:71:
81:41:48:99:f0:d3:39:0c:8a:2e:4d:cc:74:82:d9:b3:12:b2:
86:48:b0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:59 2026 by rpki-client